Said TurkseverandClaude Opus 5.5 5a7ce5785e Merge upstream/main (v0.2.1) into pr/mapillary-layer ...

Brings in 123 commits from main, including the v0.2.0 and v0.2.1 releases
(MCP server and tool catalog, server security hardening, build hygiene).

Conflicts:
- package.json: kept main's script order and added this PR's
  qa:panel-resize and qa:street-level; exports keep both sides (main's
  tools/view entries and this PR's street-level and Mapillary entries).
- src/tooling/viteBuild.test.mjs: kept this PR's Mapillary-token define
  assertion and main's new wildcard-host allowedHosts assertions.
- CHANGELOG.md: main now has release sections; this PR's entries go under
  [Unreleased].

Checks after the merge: doctor, format:check, check:boundaries,
layer-token:check (28 published, 1 new: street-level 0), npm test (5726
pass), build, the Windows job's focused tests (70 pass), qa:panel-resize,
and the keyless street-level gate. The new CSP allows Mapillary (https:
connect/img, blob workers). The keyed gate stops at coverage locally
because the dev .env Mapillary token is invalid (upstream 403), not because
of the merge.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-03 13:29:32 +01:00

..

fixtures/voice

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

build-admin-packs.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

build-military-names.py

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

build-panel.mjs

Run the worker prelude ahead of Cesium's own workers script

2026-10-02 18:29:42 -07:00

build-sf-neighborhoods.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

check-import-directions.mjs

feat: describe what the app shows as a view

2026-10-02 15:21:36 -07:00

check-layer-state-tokens.mjs

fix: allocate share-link layer tokens without collisions

2026-09-24 16:25:55 +05:30

check-package-boundaries.mjs

feat(sdr): local receivers — browser RTL-SDR, Local ADS-B layer and decoder feeds (#732)

2026-09-23 16:00:53 -05:00

dev-cctv.sh

fix: share CCTV startup and keep proxy diagnostics bounded

2026-09-10 23:01:51 -07:00

dev-fresh.sh

feat(cctv): add the Open Calgary camera pack (#514)

2026-09-14 19:45:52 -05:00

dev-secure.sh

refactor(tools): support an explicit project directory

2026-09-14 07:35:38 -07:00

focus-allocation-check.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

format-runtime.json

build: discover owned runtime modules in the formatter gate

2026-09-15 07:26:32 -07:00

format-scope.json

Merge upstream/main (v0.2.1) into pr/mapillary-layer

2026-10-03 13:29:32 +01:00

format.mjs

build: discover owned runtime modules in the formatter gate

2026-09-15 07:26:32 -07:00

google-server-key.mjs

fix: separate Google browser and server keys (#110)

2026-09-11 15:08:23 -07:00

military-names-files.json

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

military-names.sql

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

module-analysis.mjs

refactor: enforce import directions and expose source factories

2026-09-14 21:12:01 -07:00

next-layer-state-token.mjs

fix: allocate share-link layer tokens without collisions

2026-09-24 16:25:55 +05:30

opensky-import-client.sh

refactor(tools): support an explicit project directory

2026-09-14 07:35:38 -07:00

package-boundaries.json

Merge upstream/main (v0.2.1) into pr/mapillary-layer

2026-10-03 13:29:32 +01:00

pinokio-environment.mjs

fix: separate Google browser and server keys (#110)

2026-09-11 15:08:23 -07:00

pinokio-install.mjs

release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

2026-08-31 17:49:45 -05:00

pinokio-preflight.mjs

release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

2026-08-31 17:49:45 -05:00

pinokio-reset.mjs

release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

2026-08-31 17:49:45 -05:00

pinokio-start.mjs

release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

2026-08-31 17:49:45 -05:00

pinokio-update.mjs

fix(pinokio): disclose incoming changes before Update pulls and installs (#507)

2026-09-14 19:34:23 -05:00

precompute-cctv-heights.mjs

docs(cctv): describe the ground-height data plainly (#443)

2026-09-13 21:54:29 -05:00

project-root.mjs

refactor(tools): support an explicit project directory

2026-09-14 07:35:38 -07:00

qa-admin-outlines.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-alpr-journey.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-application.mjs

style: adopt application modules into scoped formatting

2026-09-11 17:03:35 -07:00

qa-attribution-b12.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-cables-overlay.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

qa-cables-render-probe.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

qa-cables-shot.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

qa-camera-controls.mjs

fix: preserve camera controls when rebuilding the Radio panel

2026-09-13 01:23:55 -07:00

qa-cctv-v2.mjs

feat(cctv): seven camera packs, semantic labels, terrain-clear monitor planes (#433)

2026-09-13 21:48:33 -05:00

qa-cockpit-plates.mjs

fix(qa): align renderer evidence and attribution keyboard assertions

2026-09-11 14:50:57 -07:00

qa-cockpit-utility.mjs

test(qa): cover the seven-mode Cockpit vision carousel

2026-10-02 21:43:12 -07:00

qa-context-arrivals.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-directions.mjs

feat(directions): keyless A→B directions with turn-by-turn steps and FLY (#564)

2026-09-14 20:09:41 -05:00

qa-director-camera.mjs

feat(director): add authored camera directions and anchors

2026-09-15 16:53:26 -07:00

qa-director-interactions.mjs

feat: add declarative Director feature actions

2026-09-15 19:16:49 -07:00

qa-director-packs.mjs

feat(director): add bounded scene data packs and placement

2026-09-15 17:59:53 -07:00

qa-director-sharing.mjs

Add Director authoring, import previews and scene bundles

2026-09-15 20:15:32 -07:00

qa-director-timing.mjs

refactor(director): separate timing clocks and scene pack presentation

2026-09-15 15:41:42 -07:00

qa-draw-tool.mjs

feat(annotations): draw on the world by hand (#547)

2026-09-14 19:59:26 -05:00

qa-enrich-ambient.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-failstate-b10.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-final-polish-credits.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-firms.mjs

refactor(fires): separate source, rendering and interaction components

2026-09-13 12:48:26 -07:00

qa-firstrun-mutations.mjs

refactor(ui): share surface keyboard lifecycle

2026-09-12 18:45:30 -07:00

qa-firstrun.mjs

fix(qa): align renderer evidence and attribution keyboard assertions

2026-09-11 14:50:57 -07:00

qa-floor-hold.mjs

fix(qa): select the billboard mode measured by floor-hold checks

2026-09-11 14:54:30 -07:00

qa-floor-verify.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-floorhold-mutations.mjs

Keep structural and terrain regression pins on component owners

2026-09-13 09:54:55 -07:00

qa-floorhold-probe-cost.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

qa-floorhold-staircase.mjs

release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

2026-08-31 17:49:45 -05:00

qa-flyroute-cinema.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-flyroute-mutations.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

qa-focus-evidence.mjs

release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

2026-08-31 17:49:45 -05:00

qa-heading-b3.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-height-datum.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-infra-lod.mjs

fix(infrastructure): stop idle republishing and respect settled terrain

2026-09-11 08:59:32 -07:00

qa-installation-navigation.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-installation-polish.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-journey-recorder.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-l9-matrix.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-label-readability.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-labels.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-layer-panel.mjs

feat(weather): add globe wind, observed weather and cyclone context (#617)

2026-09-22 17:45:39 -05:00

qa-layer-token-twochar.mjs

fix: allocate share-link layer tokens without collisions

2026-09-24 16:25:55 +05:30

qa-location-controls.mjs

style: format state subscriptions and their adopted controls

2026-09-13 05:43:05 -07:00

qa-map-source-controls.mjs

test: wait for settled map imagery in control captures

2026-09-12 22:26:29 -07:00

qa-map-source-tray.mjs

Update UI acceptance fixtures for panel ownership

2026-09-14 15:43:27 -07:00

qa-military-names.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-nepal-media-playback.mjs

fix: scope Nepal media playback to explicit scene actions

2026-09-16 12:14:15 +05:30

qa-overlay-baseline.mjs

release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

2026-08-31 17:49:45 -05:00

qa-overpass-offload.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-panel-resize.mjs

fix(ui): portable panels survive reloads and answer a real double-click

2026-09-25 20:45:17 +01:00

qa-perf.mjs

release: v0.1.0 — one-click install, keyless boot, in-app Provider Settings (#142)

2026-08-31 17:49:45 -05:00

qa-radio.mjs

fix(radio): restore the Radio QA harness and the row refresh it depended on (#736)

2026-09-23 19:51:56 -05:00

qa-recent-imagery.mjs

feat(layers): Recent Imagery — open satellite imagery for a selected box (#716)

2026-09-22 20:34:11 -05:00

qa-scene-controls.mjs

Add Director authoring, import previews and scene bundles

2026-09-15 20:15:32 -07:00

qa-sprites-b5.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-street-level.mjs

fix(street-level): camera height over Google 3D, cast only when it helps, gate token

2026-10-02 01:01:40 +01:00

qa-terrain-429.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-traffic-baseline.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-traffic-jamviz-ab.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-traffic-motion.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-traffic-navigation.mjs

fix(traffic): recover road loading after city navigation

2026-09-13 14:47:26 -07:00

qa-traffic-oblique.mjs

fix(osm): stop using public Overpass by default (#648) (#742)

2026-09-28 19:07:57 -05:00

qa-traffic-preset-ab.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-traffic.mjs

test: wait for destination traffic after camera changes

2026-09-15 08:40:58 -07:00

qa-transit-browser.mjs

fix(transit): keep the real silhouettes under sensor presets, make the selected trail visible, put Transit in Movement (#596)

2026-09-15 13:26:41 -05:00

qa-transit-controls.mjs

feat(transit): live public-transit vehicles from open GTFS-Realtime feeds (#587)

2026-09-15 05:18:30 -05:00

qa-transit-heading.mjs

fix(transit): keep parked vehicles pointed along their course while the camera orbits (#603)

2026-09-15 14:15:27 -05:00

qa-transit-recovery.mjs

fix(transit): keep the real silhouettes under sensor presets, make the selected trail visible, put Transit in Movement (#596)

2026-09-15 13:26:41 -05:00

qa-transit-scenes.mjs

fix(transit): keep the real silhouettes under sensor presets, make the selected trail visible, put Transit in Movement (#596)

2026-09-15 13:26:41 -05:00

qa-transit.mjs

fix(transit): keep parked vehicles pointed along their course while the camera orbits (#603)

2026-09-15 14:15:27 -05:00

qa-ui-disposal.mjs

feat(ui): toggle rendered frame rate with backtick

2026-09-13 14:51:24 -07:00

qa-vessel-cards.mjs

Extract vessel components and preserve source lifecycle

2026-09-13 10:54:32 -07:00

qa-vessel-datum.mjs

fix: update vulnerable dependencies and adapt browser QA to Puppeteer 25

2026-09-10 23:08:26 -07:00

qa-view-target-prewarm.mjs

fix(qa): choose portable browser renderers outside macOS

2026-09-11 14:43:13 -07:00

qa-visual-effects.mjs

style: format state subscriptions and their adopted controls

2026-09-13 05:43:05 -07:00

qa-visual-input.mjs

style: format Display controls and browser acceptance checks

2026-09-12 21:25:05 -07:00

qa-voice-routing.mjs

fix(data): load bundled region packs in the browser; bound region lookups (#743)

2026-09-24 01:52:41 -05:00

qa-voice-wav.mjs

refactor(voice): separate Realtime state and resource owners

2026-09-15 12:05:01 -07:00

qa-weather-journey.mjs

feat(weather): add globe wind, observed weather and cyclone context (#617)

2026-09-22 17:45:39 -05:00

qa-weather-perf.mjs

feat(weather): add globe wind, observed weather and cyclone context (#617)

2026-09-22 17:45:39 -05:00

qa-weather-swap.mjs

feat(weather): add globe wind, observed weather and cyclone context (#617)

2026-09-22 17:45:39 -05:00

qa-weather-teardown.mjs

feat(weather): add globe wind, observed weather and cyclone context (#617)

2026-09-22 17:45:39 -05:00

qa-wind-canvas.mjs

feat(weather): add globe wind, observed weather and cyclone context (#617)

2026-09-22 17:45:39 -05:00

read-dotenv-value.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

run-unit-tests.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

setup-doctor.mjs

refactor(mapillary): remove the plain-English query feature

2026-09-25 18:08:43 +01:00

shot-sink.mjs

Release God's Eye View as open source

2026-08-24 17:02:16 -05:00

track-regression.mjs

feat(weather): add globe wind, observed weather and cyclone context (#617)

2026-09-22 17:45:39 -05:00

traffic-fixtures.mjs

refactor: separate traffic and bikeshare components

2026-09-13 14:10:38 -07:00